# tenants Namespace — every tenant instance lives here. Created
# explicitly (rather than relied on Argo's CreateNamespace) because
# the wildcard Certificate below targets this namespace and Argo's
# sync wave can race namespace-default-creation otherwise.
apiVersion: v1
kind: Namespace
metadata:
  name: tenants
  labels:
    app.kubernetes.io/managed-by: cluster-platform-v3